NETGEAR FVX538v2 - ProSafe VPN Firewall Dual WAN Reference Manual page 211

ProSafe VPN Firewall 200 FVX538 Reference Manual
After a rollover of the gateway WAN port, the previously inactive gateway WAN port becomes the
active port (port WAN2 in this example) and the remote PC client must re-establish the VPN
tunnel. The gateway WAN port must act as the responder.
Figure B-11
The purpose of the fully-qualified domain name in this case is to toggle the domain name of the
gateway firewall between the IP addresses of the active WAN port (such as WAN1 and WAN2) so
that the remote PC client can determine the gateway IP address to establish or re-establish a VPN
tunnel.
VPN Road Warrior: Dual Gateway WAN Ports for Load Balancing
In the case of the dual WAN ports on the gateway VPN firewall, the remote PC initiates the VPN
tunnel with the appropriate gateway WAN port (that is, port WAN1 or WAN2 as necessary to
balance the loads of the two gateway WAN ports) because the IP address of the remote PC is not
known in advance. The chosen gateway WAN port must act as the responder.
Figure B-12
Network Planning for Dual WAN Ports B-13
v1.0, January 2010